Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/B797228EC64E11EE939CA20CC4F9AE02.roa
File:                     B797228EC64E11EE939CA20CC4F9AE02.roa (raw, json)
Hash identifier:          siSSx9lHP7D6IdchQxrvTKGXiqmq86MYM45+RonrTU0=
Subject key identifier:   62:6B:EA:48:5E:50:8C:16:6E:6C:10:0F:0F:AF:14:CD:38:2A:A4:B2
Certificate issuer:       /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
Certificate serial:       0796
Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/B797228EC64E11EE939CA20CC4F9AE02.roa
Signing time:             Fri 12 Jul 2024 17:24:48 +0000
ROA not before:           Fri 12 Jul 2024 17:24:48 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     58889
IP address blocks:        45.64.136.0/22 maxlen: 24
                          2401:1980::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl
                          rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1942 (0x796)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
        Validity
            Not Before: Jul 12 17:24:48 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=669166e0-b7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:54:2b:c2:ec:05:6a:a2:77:35:35:85:c8:
                    c5:4e:ec:f0:a9:e1:8a:a0:ba:f5:4e:20:41:70:49:
                    75:c9:83:d4:16:25:ba:74:3f:5c:25:e2:91:9c:c2:
                    cc:6c:b8:74:11:8f:3f:32:eb:5e:c0:0b:41:b7:ab:
                    10:42:52:81:9d:d4:80:fe:65:21:e0:c5:6a:c1:a0:
                    17:8c:3a:36:06:cd:8b:53:00:1a:f4:0b:65:ab:6e:
                    76:14:40:90:07:5e:e8:c7:a4:b9:dd:9e:d7:38:f1:
                    b5:7e:76:74:d7:da:2d:61:0e:0e:d9:87:bd:91:19:
                    14:eb:ef:4d:8d:78:ef:e3:4f:10:6b:4e:d6:39:b6:
                    c4:7a:04:9d:ca:18:e5:88:92:27:8c:b0:e9:2e:7e:
                    fc:80:1d:4c:c2:94:a5:a6:2c:17:fe:fe:54:11:5d:
                    79:8d:e9:00:f9:92:50:2a:2d:df:8f:85:04:d7:1e:
                    2e:ba:69:82:22:c5:fe:28:25:a5:76:36:0c:2c:2b:
                    3d:68:fd:42:fe:91:12:fa:1c:e8:d7:b7:ee:22:63:
                    f1:6b:58:fb:ed:66:ed:f4:eb:33:1f:33:7e:e6:b7:
                    e2:0b:3a:f8:c0:fe:ae:ba:f1:ce:43:ac:ff:3a:3b:
                    c4:ab:df:42:88:93:e9:b2:9b:b4:88:2b:d5:d0:65:
                    b5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6B:EA:48:5E:50:8C:16:6E:6C:10:0F:0F:AF:14:CD:38:2A:A4:B2
            X509v3 Authority Key Identifier:
                keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/B797228EC64E11EE939CA20CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.136.0/22
                IPv6:
                  2401:1980::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:7c:21:b7:de:02:55:6d:2c:48:ef:7a:72:2f:99:45:67:15:
         f8:ab:60:47:f1:12:96:54:b5:ca:8d:67:a8:4d:1e:a5:57:62:
         30:89:68:40:96:5c:db:ea:7d:24:3d:88:69:70:a0:48:ff:31:
         ad:db:e5:2c:6f:53:18:02:1a:e5:58:81:30:d1:06:8e:e1:d1:
         4c:40:e5:54:0d:62:60:08:cb:9c:f2:a8:70:d9:c6:9d:3c:45:
         24:d9:dd:23:5a:4b:33:a1:f1:be:ba:d5:c7:4e:ce:d9:c8:a5:
         ab:03:d7:1a:f5:41:21:9e:c2:60:63:fc:d2:b2:0b:c2:a9:61:
         3b:7b:f1:5f:c1:20:0c:ce:d3:aa:d4:37:a1:7a:7c:d8:4e:dc:
         80:90:67:c0:21:56:a8:56:0b:f3:83:8d:13:79:2b:b3:0b:ee:
         f1:4e:d0:3b:fa:25:ba:f2:0b:49:86:7a:f9:46:47:fa:4a:ec:
         fd:6f:5a:80:24:e3:c1:96:78:56:64:c7:a3:c5:10:2f:99:f6:
         1b:82:12:09:50:e7:2a:84:db:34:ef:fd:95:0a:84:0e:df:b9:
         d3:a7:42:cd:50:a2:bd:ac:8f:97:62:6b:5e:68:9d:5b:67:a8:
         0a:4f:77:57:b0:bc:1d:46:70:d4:b3:e2:42:88:63:fa:cb:bd:
         ad:be:49:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:46 2024 by rpki-client on console-fra.rpki-client.org